CVE-2025-2928 HIGH

CVE-2025-2928

Vendor Genetec Inc.

Product Genetec Security Center

Weakness CWE-89 · SQLi

Published July 29, 2025

Last update February 26, 2026

View on NVD All CVEs

CVSS base score

7.2/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

SQL Injection affecting the Archiver role.

Key dates

02Disclosure timeline

July 29, 2025 CVE published

February 26, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-2928 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2024-9081 SourceCodester Online Eyewear Shop view_category.php sql injection CVE-2019-25492 Homey BNB V4 SQL Injection via getcmsdata.php CVE-2026-5563 AutohomeCorp frostmourne Alarm Preview previewData httpTest sql injection CVE-2025-4713 Campcodes Sales and Inventory System print.php sql injection CVE-2024-8669 Backuply – Backup, Restore, Migrate and Clone <= 1.3.4 - Authenticated (Admin+) SQL Injection

Identifiers

CVE CVE-2025-2928

CWE CWE-89

CVSS 7.2 / HIGH

Affected versions

Vendor Genetec Inc.

Product Genetec Security Center

Affected >=5.9.0.0 <5.9.5.9

Vendor Genetec Inc.

Product Genetec Security Center

Affected >=5.10.0.0 <5.10.4.28

Vendor Genetec Inc.

Product Genetec Security Center

Affected >=5.11.0.0 <5.11.3.19

Vendor Genetec Inc.

Product Genetec Security Center

Affected >=5.12.0.0 <5.12.2.6

Vendor Genetec Inc.

Product Genetec Security Center

Affected >=5.13.0.0 <5.13.1.1